npm security vulnerability for minimatch

[master-elodin]

Running npm audit shows minimatch dependency having a vulnerability that was fixed in version >=3.0.2

├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ minimatch                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=3.0.2                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ jshint                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ jshint > minimatch                                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/118                       │

[jugglinmike]

Note that fixing this will involve updating this project's dependencies on browserify, jscs, and istanbul, but that the limited scope makes it a low-priority issue. More detail is available at gh-3296